Privacy notice.
Only what is needed.

When the website is accessed, technical data such as IP address, time, requested URL, browser information and security events may be processed in server logs. This is necessary to deliver the site, maintain security and investigate faults or misuse. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in secure and reliable operation.

The website is delivered using OpenAI Sites and Cloudflare infrastructure. These providers may process technical connection data on our behalf under their applicable data-processing terms.

Information collected

We process the selected request type, required timing, destination, indicative budget range, requester role, preferred response method, contact details and any optional note you provide.

Purpose and legal basis

The information is used to assess feasibility, respond to you and, if requested, prepare a possible mandate. The legal basis is Article 6(1)(b) GDPR for steps requested before entering into a contract. Article 6(1)(f) GDPR also applies to request security, abuse prevention and maintaining an auditable response record.

The required checkbox records that this notice was acknowledged. It is not used as the legal basis for processing necessary to respond to the request.

The request is transmitted to our desk through Resend, a service of Plus Five Five, Inc., United States. This involves the request content, sender and recipient details, delivery metadata and logs. According to Resend, customer data is stored in the United States. International transfers are covered by its Data Processing Addendum, EU Standard Contractual Clauses and participation in the EU-US Data Privacy Framework.

Resend states that email and log data on Free, Pro and Scale plans is retained for 30 days. Further information is available in Resend's GDPR information and Data Processing Addendum.

Recipients

Initial request information is available only to the responsible OFFICE79 desk and the technical providers required to host and transmit it. Information is shared with a maker, supplier or logistics partner only after a mandate progresses and only to the extent required for that commission or by law.

Retention

Requests that do not become a mandate are generally deleted after six months unless a longer period is required to establish, exercise or defend legal claims. Where a contract is entered into, relevant commercial and tax records are retained for the applicable statutory periods.

Automated decisions

We do not use the initial request data for automated decision-making or profiling. Feasibility is reviewed by a responsible person.

OFFICE79 currently does not use advertising pixels, behavioural analytics or non-essential cookies on this website. If that changes, this notice and any required consent mechanism will be updated before those technologies are activated.

Subject to the statutory requirements, you may request access, rectification, erasure, restriction, data portability or object to processing based on legitimate interests. You may also lodge a complaint with a data-protection supervisory authority.

The supervisory authority responsible for North Rhine-Westphalia is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen. Contact details are available at ldi.nrw.de.

To exercise a right or ask a privacy question, contact request@office79.com.